Networking modules for display systems

ABSTRACT

The disclosure relates to modem and router modules for use with digital display systems, including televisions. A modem module is configurable to attach to a set-top box, a set-back box, directly to a digital display, or may even be integrated into display equipment. Router functions and ports can be integrated into the module to provide for networking of additional devices in proximity to the module and/or display, using either or both wired and wireless access technologies. Systems including the module convert power to the appropriate forms for delivery to the different devices, hardware, and components associated with the module. The modem and routing functions are configurable to provide separate security domains to isolate or direct traffic among the various networked devices.

CROSS REFERENCE TO RELATED APPLICATIONS

This application is a divisional application of Ser. No. 16/580,180,filed Sep. 24, 2019, which is a continuation of International PatentApplication No. PCT/US2017/055342, filed Oct. 5, 2017, both of which arehereby incorporated by reference.

BACKGROUND

Content delivery networks are now capable of delivering a variety ofdifferent service categories (e.g., video, Internet, or telephone) overa single transmission medium by a single network operator, andincreasingly customers are bundling these services. By the time a signalis received in a customer premises, typically several different devicesare used to handle and process the signals and data received, dependingon the types of signals that are used deeper into the in-premisesnetwork.

For example, FIG. 1 is a diagram illustrating an exemplary servicesdelivery model known in the prior art. External network(s) 100 areconnected to premises 110 by transmission lines 120. Within the premises110, various devices can connect to transmission lines 120. For example,a modem 131, telephone 132, and audiovisual display 133 and/or set-topbox 135 may be connected. These devices may be serviced by one or morethan one transmission line type, for example, coaxial cable andtelephone wiring. With regard to Internet and general local area networkservices, the modem 131 may be further connected to a router 140 thatprovides additional access to various other networked devices 150 and150′. To give a few examples, networked device may be a desktopcomputer, laptop computer, mobile device, “smart” television or display,digital video recorder (DVR), digital assistant, game console, homeappliances and/or home automation equipment, security systems, orvarious other devices which are capable of communicating using IP-basednetwork protocols. Router 140 may include or be connected to a wirelessaccess point (WAP) 170, that can alternatively service or supplementservice to networked devices 150. As used herein, the term “router”encompasses any switch configured to deliver data to the specificport(s) selected based on characteristics of the data, including IProuting devices, Ethernet switches, packet-switching systems.

Although some prior art gateway devices combine modem and routingfunctions, the provision of broadcast audiovisual programming (such astelevision signals) is not typically integrated into such gatewaydevices. Many commercial networks also require set-top box or set-backboxes for delivery of their services, which limits the amount ofintegration that can be achieved, particularly when multiple audiovisualdisplays are used within one premises. Existing integrated systems aredirected toward providing or sharing content and/or data among severalnetworked devices. However, there is a need for various networkeddevices to have isolated data paths to the external networks to providefor and maintain security and service levels to the various devices.Additional complications can arise because a single service provider mayemploy multiple delivery networks simultaneously, such as a legacynetwork in combination with a fiber-based IP (internet protocol) system.The expense and maintenance of equipment for each of these functions canbe burdensome. This multiplication of devices is compounded for certainenterprise customers that centrally manage services provided for manyend-user points, such as hotels, educational institutions, multifamilyhousing, commercial buildings, hospitals, airports, or othermultiple-dwelling units. For example, in FIG. 1, premises 110 can be allor a part of a proximate physical facility, for example a home (or partof a home), a hotel or hotel room, or buildings on a campus. In additionto the number of devices required and potential for failure,configuration, or compatibility issues, the multiplication of cabling tointerconnect the various devices, as well as proliferation of distinctpower requirements, complicates installation, maintenance, and powerconsumption.

BRIEF SUMMARY OF THE INVENTION

The present disclosure provides for network integration of audiovisualdevices in various ways. A modem module may connect to any of atelevision, a display, a set-top box, or a set-back box by way of aninterface adapted to provide both power transfer and data communicationswith the connected audiovisual device. The module includes a networkingport that supports connectivity to additional user devices, and a routerto send traffic to the networking port or the audiovisual device. Therouter can isolate the traffic destined to the various devices servicedby the module to provide for enhanced security and reduce networkconsumption. The module may be adapted to convert power to differentforms appropriate for supply of either internal components or fordelivery to external devices, such as a wireless access point, and maysupply the external power through one or more networking ports. In oneembodiment, the module is adapted for use with cable systems, such thatthe modem is a cable modem using DOCSIS standards. Televisionprogramming may be routed to a RF tuner system on the audiovisual devicewhile data services (e.g., streaming services, interactive services,browsing and general Internet traffic) can be provided through themodule's interface or networking port(s). Benefits provided include theextension of data networking services throughout a facility usingexisting coaxial wiring.

Router, display, and/or modem functions can be implemented in aninventive integrated system. Such a system may share a common powersupply and may be physically and electrically integrated within the sameenclosure to avoid additional wiring between components. The commonpower supply may be extended to additional devices through one or morenetworking ports, again with the consolidation of communications andpower supply wiring into a single cable. The disclosure provides forintegrated systems lacking a modem function, such that communicationswith external network(s) between an integrated display and router areprovided over a networking connection rather than a modulated RF signal.However, options provided include the conversion of network informationto modulated RF signals.

The disclosure also relates to data partitioning and routing innetworking modules for audiovisual systems. Data received from anexternal network may have logical data partitioning. A networking modulemay maintain the logical partitioning to isolate each device or portserviced by the module. Examples include the separation of audiovisualcontent with limited, device-specific viewing authorizations from dataassociated with devices that are not within that authorization.Embodiments provide for the conversion of one security domain protocolor format to another, either within the module or at a separate deviceoptionally under common management. The binding of security domains tophysical ports or connections can be managed with a configuration fileor administrative controls received from the external network. Securitydomains may be nested to provide for further data portioning in apremises network, for example by partitioning traffic destined fordifferent modules, each of which in turn may maintain partitions boundto its physical connections.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of exemplary in-premises networked devicesimplemented in the prior art.

FIG. 2 is a block diagram of inventive modules in relation toin-premises networked devices.

FIG. 3 is a top-down view of an inventive module of FIG. 2.

FIG. 4A is a perspective view of an inventive module of FIG. 2configured for and attached to a side of a set-top or set-back box.

FIG. 4B is a perspective view of the inventive module of FIG. 4A, shownseparated from set-top or set-back box.

FIG. 5 is a perspective view of an inventive module of FIG. 2 configuredfor insertion into a set-top or set-back box.

FIG. 6 is a perspective view of an inventive module of FIG. 2 installedonto a display device.

FIG. 7 is a functional diagram of an embodiment of an inventiveintegrated audiovisual networking device.

FIG. 8 is a diagram of traffic partitioning and handling in an inventivemodule such as that of FIG. 2.

DETAILED DESCRIPTION 1. Structural and Operational Overview

Referring to FIG. 2, a modem module 200 can be connected to premiseswiring 120. Premises wiring 120 may be any data delivery medium,including but not limited to coaxial cable, twisted pair telephonelines, Ethernet, fiber-optic, and/or small form-factor pluggable (SFP).As one example, premises wiring 120 is coaxial cable, and may beserviced by a hybrid-fiber-coax network such as the common commercialand residential cable networks in service today. Many of theimplementations referred to herein relate to utilizing a coaxialnetwork, but the disclosures of the present application are not limitedto coaxial delivery. As further discussed below, modem modules 200 mayalso be implemented in a purely IP-based delivery system and/or withoutany coaxial cabling. One advantage provided by the modem module 200 isthe ability to use existing wiring for additional or enhanced dataservices without the need for costly and disruptive retrofitting offacilities.

Modem module 200 can integrate and/or replace functions of several ofthe networked devices depicted in FIG. 1. For example, modem module 200is optionally equipped with routing and switching functions 240 toestablish and/or increase access to an in-premises network. Datahandling relating to the various devices connected to the in-premisesnetwork is further discussed below. The modem module 200 can beimplemented in multiple formats to interface with various audiovisualdevices. For example, in some embodiments, module 200 can be physicallyand electronically linked to a set-top box or set-back box (STB/SBB)135. Module 200 may optionally be linked directly to a display device133 without the use of an STB/SBB 135. These and other physical formatsare discussed in more detail in connection with FIGS. 4-6, below.Regardless of the format of module 200, routing function may beimplemented to provide IP data communications with display 133 and/orSTB/SBB 135 or other forms of audiovisual devices.

In some embodiments, display 133 is a high-definition digital television(HDTV). However, display 133 may be other types of devices presentingvisual information, such as but not limited to, televisions, computermonitors, video monitors, touchscreen and/or tablet computing devices.Accordingly, a display 133 may optionally be equipped with an RF tuner,as in a television. Some embodiments are also compatible with tunerlessdisplays and can provide audiovisual signals to the display in variousanalog and digital video formats (including for example composite,component, S-video, VGA, SDI, DVI, or HDMI) or as data formatted fordelivery using a networking protocol, such as IP, or as other peripheraldata communication protocols including USB.

The set-top box or set-back box (STB/SBB) 135 is commonly employed byvarious commercial network operators for in-premises service delivery. ASTB/SBB may be used by the network operator as part of a conditionalaccess system, and may contribute to other functionality such as accessto multiple delivery methods and enhanced services, such as video ondemand, video telephony, Internet access, electronic program guides, andIPTV. STB/SBB 135 may be used in conjunction with display 133 that isalso serviced by module 200 or may service a separate or additionalaudiovisual device 133′ as seen in FIG. 2.

Modem 230 (see FIG. 3) provides for two-way communication with theoutside network(s) 100. For example, modem 230 may be compliant with thevarious versions of the Data Over Cable Service Interface Specification(DOCSIS), for example DOCSIS 3.0 or DOCSIS 3.1, or their variants,predecessors, and derivatives. Modem 230 may also be configured tooperate in a various territories according to local signal standards,for example, in a particular embodiment, modem 230 may be a EuroDOCSIS3.0-compliant modem. Additional modem types that can be implementedinclude DSL, fiber optic, and/or a networking port (such as an Ethernetsocket) or can function as a network bridge between external networks(s)100 and the internal premises network 110 or between different segmentsof a premises network. Modem 230 may also be equipped with additionalfunctionality, such as upconversion and transcoding, as may be suitableto a particular installation. In some embodiments, modem 230 can be awireless modem, so that module 200 acts as a wireless network extender(particularly when combined with WAP 170 or internal WAP 270 describedherein) and/or provide wireless networking capabilities to an otherwisewired device, such as an attached audiovisual device.

In FIGS. 2 and 3, routing function or switch 240 receives and sends datafrom modem 230 for, respectively, distribution within the premisesnetwork 110 and communications to the external network 100. Switch 240can support multiple devices, for example, devices 150 ₁ to 150 _(k),where k may be, for example, 3, 5, 7, 10, or 20. Routing function 240can handle general traffic (such as IP data from a networked device) aswell as media streams with audiovisual content. Display 133 and/orSTB/SBB 135 may be counted against the total k devices serviced byswitch 240, but additionally or alternatively may be separately servicedby modem 230. For example, audiovisual data suitable for presentation ona display may be sent directly from modem 230 to a suitable interface ortransmission medium without redirecting through switch routing functions240.

As seen in FIG. 3, module 200 may be equipped with various components.The embodiment shown in FIG. 3 includes a housing formed from sides 205and 206, front 207, and back 208, for example a metal or plasticelectronics structure. Within the structure may be a substrate 204 suchas a circuit board that mechanically supports and electrically connectsthe various components. The embodiment in FIG. 3 processes cable RFsignals delivered over a coaxial network, but as described above,different signal types and interfaces can be implemented withoutdeparting from the scope of the disclosure. Input port 210 may be acoaxial connector which delivers an incoming signal to splitter 220.Splitter 220 delivers the input signal to both the modem 230 and tooutput port 211. Output port 211 may be a coaxial connector, which maythen be wired to an audiovisual device, such as a coaxial cable input ona television. Various signal amplification or reduction methods may beimplemented within the module 200 or as part of its various components.For example, as is known, splitter 220 may attenuate a signal so thatpaths 221 and 225 are approximately 4 dB less than input path 215.Additional components may amplify to correct for such signal loss, ifnecessary, for signal processing either within module 200 (e.g., forhandling by modem 230) or as part of delivery to output port 211.

Although shown with a single input port 210 and single output port 211in FIG. 3, multiple inputs and/or outputs are possible. For example, themodule 200 may be connected to and have separate input ports 210 forboth a cable system and an antenna to receive over-the-air broadcasts.Other examples could include inputs from a satellite broadcast, or alocally-generated content for insertion into or displacement of signalsreceived through other media. Output port 211 can be duplicated toservice additional audiovisual equipment, different parts of the sameaudiovisual equipment, and/or combinations thereof. Either the same ordifferent content may be provided on each output port 211, and can be inthe same or different output signal and cabling formats, according toparticular embodiments and installation requirements. Embodimentsinclude providing networking over coaxial cable (such as Ethernet overCoaxial (EoC) or Multimedia Over Coax Alliance (MOCA)) as well assystems that do not use coaxial cable at all, for instance in a fullyIPTV system.

The modem 230 functions as described above, demodulating signalsreceived from input 210 for delivery of data to switch 240 and alsomodulating data from switch 240 for delivery to external networks.Illustratively, delivery may be an RF signal at the module boundary buttransmitted as packets (i.e., IP-based) among the modem, switch, andother networking components described herein. As illustrated in FIG. 3,input port 210 functions to both receive cable service from the cablenetwork and as a medium for carrying modulated outbound signals frommodem 230 to external networks.

Switch 240 routes data between various networked devices and, via themodem, the external network(s). Implementation options include using anintegrated circuit for switch functions 240, although other processortypes and combined hardware/software solutions would be available.Switch 240 is in communication with various other components of themodule 200, optionally via electrical connections and/or wiring as partof substrate 204. For example, in FIG. 3, switch 240 is in communicationwith networking sockets 261 and 262 via paths 251 and 252, respectively.The number of external networking sockets may be greater or smaller thanthe two shown in FIG. 3, and they may be positioned on various sides ofthe module 200 as needed for a particular application. As part of switchfunctions 240 or other electronic components (not shown) in module 200,path 252 may be enhanced to also carry power or carry power along aparallel path. For example, path 252 and networking socket 252 may beconfigured to provide Power over Ethernet (PoE) in various standardizedforms. Power may therefore be provided to an external device (not shown)via the network wiring, eliminating the need for additional power supplywiring relating to that device.

In some embodiments, the external device that receives power throughsocket 262 may be a wireless access point (WAP) or wireless router,although other devices, such as cameras, telephones, digital assistants,or home automation devices may be used. In some alternatives, WAP 270 isintegrated into the module 200 and in communication with switch 240 asdescribed above. By integrating or servicing either internal WAP 270 oran external WAP device, additional user devices may be connected to thenetwork with minimal additional wiring. When implemented with anintegrated WAP 270, module 200 may also include an optional antenna (notshown).

Switch 240 is also in communication with interface 280. Interface 280may provide both a networking connection and a power supply connectionwith a complementary audiovisual device (display, STB/SBB, television,monitor, etc.). In one example, interface 280 may be a 60-pin connectoradapted for mating with a STB/SBB expansion slot, where four pinsprovide an IP interface (e.g., 100 Mbps Ethernet support) while power issupplied over one or more additional pins. The remaining pins can beassigned to specific functions with direct or indirect wiring to othercomponents such as, for example, a hardware reset for modem 230 or theentirety of module 200 or status polling or internal diagnosticcommunications. Other interface types may be used, such as, but notlimited to, PCI, PCI Express, USB, ExpressCard, CardBus, otherstandardized bus interfaces and their derivatives, and custom interfacesfor mating to particular hardware in the audiovisual device.

A feature of the disclosure is the supply of power from the audiovisualdevice to module 200. As illustrated, power is supplied through one ormore conductors in interface 280. However, separate, distinct, oradditional connections to the attached device may be dedicated to powerdelivery instead of or in addition to power received through interface280. Within the module 200, power supplies can be modified to anappropriate form for delivery to other components or media. For example,power delivered to module 200 from an attached television could be 12VDC, while power from the module to an attached device (such as PoE to awireless access point) could be in about the 30V to 60V range.

2. Module Formats for Use with Various Audiovisual Systems

FIGS. 4 to 7 illustrate non-limiting examples of various modules toenhance networking capabilities of audiovisual systems. FIG. 4A depictsa STB/SBB expansion module 200 with a layout similar to the schematicshown in FIG. 3. The STB/SBB 135 is shown with power supply input 190,RF input 191, networking port 192, and audiovisual ports 195. As seen inFIG. 4A, the module 200 may have an output 211 wired to the STB/SBB'sinput 191 with, for example, coaxial cable 121. The module 200 may, inturn, be connected to external networks through premises wiring 120attached to its input port 210. In FIG. 4B, the module 200 is showndisconnected from the STB/SBB 135 of FIG. 4A. Side 205 has an openingfor interface 280 to connect to the STB/SBB. Input 210 and output 211are shown as coaxial connectors. Socket 260, for example an Ethernetsocket, is shown on rear 208, rather than the front as shown in FIG. 3,but may be located on any side or multiple sides. Moreover, socket 260may be for a serial bus interface, such as USB, rather than atraditional networking socket, which may be configured to providenetworking and/or IP-based connectivity over an alternative physicalport format. Module 200 may also include indicators 213 visible on rear208 (or other surfaces), such as light-emitting diodes (LEDs) toindicate the status of signals, internal components, and/or externalports.

In FIG. 5, module 201 is configured to slide into an expansion slot anaudiovisual device (not shown), such as a STB/SBB. In this embodiment,substrate 204 attaches to a plate or cover 209 that, after installationin a STB/SBB, is the only exposed surface. The illustrated embodiment isslid into an opening in the back of the STB/SBB. As shown, interface 280is located at a distal end of the substrate 204, although otherlocations and orientations can implemented according to particularinstallation needs. As with module 200, in module 201, input 210, output211, indicators 213, and networking socket 260 are accessible on plate209. Disclosed embodiments include multiple networking sockets 260 ofone or more types and kinds. Additionally, the STB/SBB may include oneor more networking ports separate from the module 201, which, uponinstallation of the module, are serviced with connectivity and modemfunctions of the module 201 through interface 280.

In FIG. 6, a display-mounted module 202 is shown. Module 202 may haveall of the same functionalities as modules 200 and 201 described above.However, here module 202 is attached directly to the back of anaudiovisual display device. For example, the 60-pin connector describedabove (in FIG. 5) as an interface 280 may be positioned and oriented toextend below or behind the substrate 204 in FIG. 5 and into an openingin the display 400 of FIG. 6. Typically, such a mounting will be on theback of the display enclosure or housing, opposite the screen. Display400 has audiovisual ports 410, such as coaxial, analog video, digitalvideo, and/or audio and video outputs, which may be connected to module202. Although shown as connected to the module 202 using externalcabling, a display-mounted module may also provide audiovisual content,data, and/or signals over interface 280 in FIG. 5 in place or as asupplement to that provided from the module output to the displayaudiovisual ports 410. Also of note in FIG. 6, display 400 has powerinput 490, while the module 202 is not supplied with its own powersupply. Instead, interface 280 in FIG. 5 receives D.C. power from thedisplay 400. Power from the display 400 can be converted to anappropriate form to power an external device, as previously described,such as wireless access point 170 shown here. The wireless access point170 connects to one of the networking sockets 262 while a wired networkconnection connects to another networking socket 261.

In a variation (not shown), a module can be implemented to convert IPTVdelivery services to a traditional distribution mode, such as coaxialRF, and thereby provide backward-compatibility to display devices. In anIPTV distribution system, television programming is delivered overnetworks based on an IP format. An inventive module, for example, mayinclude many of the features illustrated in FIG. 3 but omit splitter220. Instead, the module receives IP-based programming either throughmodem 230 or through switch 240 via a networking port. The modem,switch, or other components of the module are configured to convert IPTVprogramming to transport streams suitable for a traditional televisioninput (such as QAM or VSB modulation). The modem can then modulate thetelevision programming for delivery over a traditional legacy medium,such as coaxial cable, to an associated audiovisual device. The outputpath may be distinct from all input paths to the modem. Thus,audiovisual devices with limited input formats can be transitioned intoa IP-based delivery system.

In a further embodiment (not shown), an inventive module can beimplemented within and integrated with a display unit, such as atelevision. A routing function, router, or switch can be included in themodule and integrated display unit. The display device can furtherinclude an integrated wireless access point in communication with theswitch and modem, as previously described. Thus, network access can beprovided in the vicinity of the display unit with minimal and/or nointerconnected wiring between devices. Further components may beintegrated into the all-in-one display unit. For example, a mass storagedevice, hard drive, or digital video recorder (DVR) may be integratedinto the device. The display unit may also be equipped with a processorproviding advanced functionalities for user access and input, such ascommercially available “smart” televisions. The display unit may alsolack an RF tuner and be designed for an entirely IP-based contentdelivery system.

An advantage provided throughout the disclosure is the elimination orreduction of external wiring that is subject to alteration,misconfiguration, or mutilation by users. A further advantage is thecapacity of using existing facility wiring to provide a variety ofservice types to multiple user devices from one integrated device,without the need to run additional wiring (such as, for example,Ethernet) to retrofit facilities. Integration of power supplies furtherreduces external wiring necessary to provide the various services of theintegrated device. For example, in an embodiment integrating a display,cable modem, and router, a single power supply unit with an AC input(similar to power input 490 in FIG. 6) may convert to DC power outputssupplying power to each of the display, cable modem, and router.

In FIG. 7, an embodiment includes an integrated audiovisual networkingdevice with an integrated display 700 and switch 740. A distinct modemmay be omitted from this system. Instead, in a premises setting withnetwork connectivity, the external network(s) can be extended throughswitch 740 to the display 700 and additional devices. For example, thedevice may include an input port, such as illustrated networking socket710 (e.g., Ethernet port) that can be connected to the premises networkthrough conventional wiring (e.g., CATS). Optionally, display 700 can beequipped with a processor, operating system, and memory that operate asa driver 785 for the display 700. Again, an example of such technologyis a commercially available “smart” TV or monitor. The driver 785receives input from user interfaces 765, such as a remote control,microphone, or buttons mounted on the device. Driver 785 controls thepresentation on display 700 in response to user input, sends requeststhrough switch 740, and receives content from switch 740. Optionally,display may include a television tuner (e.g., RF input), and driver 785can select between content received from switch 740 and programmingreceived through the television tuner for presentation on display 700.Switch 740 may provide additional network connectivity to output ports761 and 762. As before, output port may be configured to provide powerto an external device, including a WAP, and the different output portsmay be configured differently, such as different power levels, differentphysical socket formats, or different transmission formats andprotocols. A WAP 770 may also be integrated into the audiovisual device,such that the network access is provided through switch 740 to variousadditional wireless devices in the premises. Single power supply 790 cansupply power to the various components within the device, including theconversion from external AC power to DC power appropriate for each ofthe display, driver, and switch, respectively. Single power supply 790can also supply optional integrated WAP 770 and/or an external devicethrough a port, such as is illustrated in FIG. 7 with port 762.

3. Networking Options, Security, and Configuration

Module 200 may be configured to isolate traffic to and from the variousnetworked devices. The modem and switch may provide firewalled datapartitioning among the different isolated ports within the network, suchas logical VLAN partitioning. Data partitioning has several benefits,including enhanced security (e.g., isolating external user traffic fromcontrol processes and settings, or restricting content to authorizedlimits) and lowering the data rate required for the switch to serviceany given networked device. Security domains can be managed in variousprotocols and formats, for example as VLAN tags, unique service flowidentifiers (SFID), 802.1q, multiprotocol label switching (MPLS), ortunneling including IPSEC/GRE layer 2 or layer 3 tunnels. Thus, eachport or device serviced by the module may be bound to a separatesecurity domain even though serviced by one common physical connectionor path to external network(s).

For example, in FIG. 8, four distinct primary security domains are shownas associated with a module 200, one of which has three secondarysecurity domains nested within it. Network(s) 800 send traffic 810 tothe module 200, optionally with additional processing through cablemodem termination system (CMTS) 805 or other network interface device aswill be further explained below. In this example, administrative ormanagement traffic is isolated on partition 811, audiovisual contentdestined for an associated audiovisual device 133 is isolated onpartition 812, traffic for a first networking port (“Port A”) isisolated on partition 813, and traffic for a second networking port(“Port B”) is isolated. It will be appreciated that more or fewerpartitions and/or subpartitions can be used as needed to service variousconfigurations of inventive modules. Multiple groups of secondarysecurity domains can be used, and one could even nest another layer ofsecurity domains within a security domain that is itself is nested in aprimary security domain. In this illustration, the module 200 transfersthe isolated partitions 811, 812, 813, and 814 (including the nestedsecondary security domains VLAN1 841, VLAN2 842, and VLAN3 843) alonglogical paths 821, 822, 823, and 824, respectively. Although shown asseparate paths 821, 822, 823, and 824, the logical paths may sharephysical and/or electrical paths while maintaining the logicalpartitioning, for example, by having one coaxial connection to theexternal network(s).

Within module 200, security partitioning can be maintained in the sameprotocol or format as in traffic 810, or may be converted to a differentisolation scheme. For example, partitions 811, 812, 813, and 814 mayhave VLAN tagging, while paths 821, 822, 823, and 824 use SFID tagging.In an optional alternative, a CMTS 805 can convert different taggingschemes and protocols associated with the traffic 810, such as thedescribed VLAN-to-SFID conversion. A configuration file 831 internal tothe module 200 may be delivered through administrative traffic 811 and821. In an alternative (not shown), configuration file 831 can also beinstalled via a locally-connected device through a networking port.Configuration file 831 may determine the mapping to be applied to thedifferent data partitions.

Other traffic routed through the module, such as traffic on paths 822,823, and 824, may be delivered as output signals 832, 833, and 834,respectively. Signals 832, 833, and 834 may be in any of the variousformats that have been previously described in connection with FIGS.1-7. In FIG. 8, traffic 833 is a partition dedicated to serving a wireduser network device 150, for example a desktop computer, while traffic834 is a partition dedicated to servicing a WAP 170. The WAP 170 may, inturn, service various additional devices, and may optionally employ itsown security and authentication protocols which may differ from thetraffic handling within module 200.

Traffic flowing in the other direction (toward external network(s) 800)can be similarly isolated. For example, traffic packets received fromconnected devices through signals 832, 833, and 834 will be untagged.Module 200 can apply tagging to differentiate the sources of the variouspackets and maintain isolation of data as the packets are relayed, forexample by using SFID tagging. Upon transmission outward through traffic810, partitions 811, 812, 813, 814 will remain partitioned and isolatethe packets that were provided from the distinct paths 821, 822, 832,and 834, although, as described above, the partitioning/tagging protocolor format can be modified within module 200 or optionally at a CMTS 805.

Data partitioning can also be nested to further isolate device-specifictraffic in a network. For example, multiple modules 200 can be usedwithin a commonly-managed facility to service different areas. Oneexample is a hotel, with modules installed in association with each ofthe guest rooms, as well as common areas, dining facilities, etc., thatare managed by one operator. Local operator equipment (such as a CMTS)may create SFIDs applicable to each modem module in the operator-managednetwork. Each SFID may, in turn, contain VLAN-tagged packets, wherebythe module can route VLAN-tagged traffic to multiple ports according tothe VLAN availability of the different ports and its configurationfile(s). Alternatively, SFIDs may be defined to map to the specificports of a given module. Although described in this example with nestedSFID and VLAN tagging schemes, various of the other tagging protocolscan be nested to create additional virtual networks within an outerpartitioning. As examples, 802.1q may be nested within MPLS, 802.1q maybe nested within 802.1q, or MPLS nested within SFID.

1. A system, comprising: a display; a module in communication withexternal networks, the module partitioning network traffic betweenaudiovisual data addressed to the display and networking data addressedto one or more additional devices, wherein the module comprises aseparable housing connected to the display through an interface whichsupplies power from the display to the module; wherein the audiovisualdata and networking data are received from external networks using thesame path.
 2. The system of claim 1, comprising: a wireless access pointconnected to the module; wherein the module partitions network trafficbetween audiovisual data addressed to the display, networking dataaddressed to one or more additional devices, and WAP data addressed tothe wireless access point.
 3. The system of claim 2, wherein the displayis a television
 4. The system of claim 3, wherein the module comprises acable modem adapted to communicate with external networks using RFsignals over a coaxial delivery system.
 5. The system of claim 4,wherein the module comprises a splitter which delivers an input signalto both the cable modem and an output port connected to the televisionby a coaxial cable.
 5. The system of claim 3, wherein the modulecomprises a wireless modem module in communication with externalnetworks.
 6. The system of claim 1, comprising: a configuration filestored by the module; wherein the module associates a label for each ofthe partitioned data based on information in the configuration file. 7.The system of claim 6 wherein the module provides both primarypartitions isolated from one another and secondary partitions nestedwithin one of said primary partitions wherein said secondary partitionsare isolated from one another.
 8. The system of claim 6, wherein thelabel for each of the partitioned data is a VLAN tag.
 9. The system ofclaim 6, wherein the label for each of the partitioned data is a SFIDtag.
 10. The system of claim 6, wherein the label for each of thepartitioned data is an 802.1q tag.
 11. The system of claim 1, whereinnetwork traffic received by the module is in a first isolation format,wherein the module converts the network traffic from the first isolationformat to a second isolation format.
 12. A system, comprising: anaudiovisual device; a networking module in communication with externalnetworks, wherein the networking module comprises a separable housingconnected to the audiovisual device through an interface which suppliespower from the audiovisual device to the networking module, wherein thenetworking module receives networking packets and converts IP-basedprogramming from the networking packets to transport streams which aremodulated for delivery over a coaxial cable to the audiovisual device.13. The system of claim 12, wherein the module receives the IP-basedprogramming through a cable modem.
 14. The system of claim 12, whereinthe module receives the IP-based programming through a networking port.15. The system of claim 12, wherein the module comprises a router incommunication with a wireless access point, wherein the modulepartitions networking packets containing IP-based programming addressedto the audiovisual device from networking packets data addressed to thewireless access point.
 16. A networking module, comprising: a housingcomprising an opening for an interface for connecting the networkingmodule to an audiovisual device, the interface adapted to receive powerfrom the audiovisual device and exchange IP data with the audiovisualdevice; a modem configured to convert an input signal from an externalnetwork to networking packets; a networking port in communication withthe modem; and a router configured to address a selection of thenetworking packets to one or more of the audiovisual device or thenetworking port, send the selection to a corresponding device, andreceive outbound packets from one or more of the display device and thecorresponding device; wherein the modem is configured to modulate theoutbound packets into an output signal; wherein the networking module isadapted to convert power received from the audiovisual device in a firstform to a second form appropriate for an external device and deliver thesecond form through the networking port.
 17. The networking module ofclaim 16, comprising a wireless access device in communication with andpowered by the networking port.
 18. The networking module of claim 16,wherein the networking module partitions networking packets betweenaudiovisual data addressed to the display and networking data addressedto the networking port.
 19. The networking module of claim 18, whereinthe networking packets are isolated using VLAN partitioning.
 20. Thenetworking module of claim 16, wherein the networking module isconfigured to convert IP-based programming from the networking packetsto transport streams and modulate the transport streams to an RF signalfor delivery to the audiovisual device.